1. Scope and contact

This Policy explains how Kreovar handles personal information when you visit the site, create an account, use creative tools or purchase a subscription. Contact Kreovar at kreovarstudio@gmail.com for privacy questions or requests. This Policy covers Kreovar; third-party services have their own privacy notices.

2. Information we process

Account information includes your email, optional creator name, account identifier, authentication/session information and account preferences. Creative content may include uploaded video/audio/images, extracted speech audio, transcripts, captions, prompts, scripts, generated voiceovers, project timelines, saved content ideas and other assets.

Subscription records include the payment email, plan, billing cycle, payment or membership identifiers, verification status and usage counters. Technical records may include IP address, browser/device information, request and error logs, timestamps and security/rate-limit events. You may also provide information when requesting support. Whop handles payment details; Kreovar does not receive or store full card numbers or card security codes.

3. Why we use information

We use information to authenticate users, save projects and assets, generate requested content, transcribe speech, execute editing instructions, export media, provide support, verify payments, manage allowances and prevent abuse. We may send necessary service, security, account and billing communications.

Where applicable law requires a legal basis, we rely on performance of the service contract, legitimate interests such as security and troubleshooting, legal obligations, and consent where required. Where consent is used, you may withdraw it without affecting earlier lawful processing. We do not sell personal information or use uploaded creative content for targeted advertising.

4. Service providers and AI processing

Supabase provides account authentication, database and cloud asset storage. Our hosting provider processes requests and operational logs; the service may run locally during testing and on Netlify when deployed.

Requested AI features can send relevant prompts, script text, speech audio, transcripts, timeline details or selected content to configured providers: Groq for content assistance, editing planning and transcription; Voice.ai for voice generation; and Google/Gemini for enabled AI features. A local transcription engine may be used when configured. Some operations process only extracted audio or project context rather than the full original video. Provider handling and retention follow their applicable terms and settings; we do not promise that every provider has zero retention. We do not train our own general-purpose AI model on your uploaded content.

Whop processes purchases and membership/payment verification and provides the data needed to connect a purchase to the payment email. Stock searches, previews and downloads can connect to Pexels, Pixabay or their media hosts. Google Fonts delivers site fonts and can receive ordinary connection information. Providers may process data in countries different from your own. We use available contractual and technical safeguards where applicable; no particular data residency is promised.

5. Cookies and device storage

Authentication uses session cookies. Browser local storage and IndexedDB can hold preferences, drafts, recovery snapshots, cached media and generated content. A referral code can be saved locally and in a cookie for up to 30 days if you arrive using a referral link. This supports referral attribution.

You can manage cookies and site data through browser settings. Blocking essential session storage can prevent sign-in or saving. Clearing browser data may remove local-only files and recovery copies. Signing out or deleting a cloud project does not necessarily erase downloaded files or local caches; remove those using your device/browser controls.

6. Sharing and security

Private account assets are intended to be available only to authorized users and service operators/providers who need access to deliver or support the service. We do not make private assets public by default. Anyone you share a downloaded file or an accessible asset link with may retain a copy. We may disclose information where required by law, to protect users and the service, or during a business transfer subject to applicable safeguards.

We use access controls, protected server credentials, authentication and other technical measures. No online service, storage system or transmission method can be guaranteed completely secure. Do not upload content you are not authorized to share with the processors needed for the selected feature.

7. Retention and deletion

We retain account information, cloud projects and assets while needed to provide the service, unless deleted or no longer needed. Payment, usage, fraud-prevention and legal records may be retained longer where necessary for accounting, disputes, security or legal obligations. Operational logs and backups may persist until their normal retention cycle ends; we do not promise instant erasure from all backups.

Use available project/asset deletion controls, or email support from your account email to request account closure or deletion. We may verify ownership before responding. We will explain any information we must retain. Locally cached and downloaded files must also be removed from your device.

8. Your choices, children and updates

Depending on your location, you may have rights to access, correct, delete, export or restrict processing of your personal information, object to certain processing, withdraw consent or complain to the relevant data-protection authority. Email support to exercise applicable rights; we respond within applicable legal timeframes.

Kreovar accounts are intended for adults and are not directed to children. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action. We will update this Policy as the service changes, show the effective date and provide additional notice when required.